13e3aa963927ef0adc3549a93315b297_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13e3aa963927ef0adc3549a93315b297_JaffaCakes118
Size

66KB
MD5

13e3aa963927ef0adc3549a93315b297
SHA1

37816d56065d320949c1c96e08b1902b700bd41e
SHA256

bc440baf3ad0aceee5a8a9e28131f6d8247e207d8edc8f99d25513603b6c1f70
SHA512

382515bb195603aa6e54a976018ee3667422fa1d2f133152edd2003a54c1c434b5cb577160d9601120684c5351e8da72cbde0e3e7c9f448ca26f64d334b70eef
SSDEEP

1536:LTl3TLLuAS4z+gj8Cd3k7dxpC+PWd4axAWKg9XNDmGiA80FLyzil:LTx3LigAAqrpTPW+gggXDm9R0FLyzi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13e3aa963927ef0adc3549a93315b297_JaffaCakes118

Files

13e3aa963927ef0adc3549a93315b297_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4ec328f99bdd944fc98d8a5cf11f7a62

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
GetLastError
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ